The problem is the adversarial relationships between the user, OS vendor, and app developers.

No technical solution can fix this, the situation is absolutely doomed to continue being an insecure, borderline unusable mess.